General
- Target 2026-04-19_2d7bcf212db1b0b553b03ce754762d7d_amadey_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar_wannacry
- Size 2.3MB
- Sample260419-221p4agy2x
- SHA256 f78396690be7eed92861a57959e76491c62b3e0c346df4c628bb0ec116167028
- MD5 2d7bcf212db1b0b553b03ce754762d7d
- SHA1 b2730539e411edf95e20b2cc1fe4e6cf4462f1e2
- SHA512 6c91ec1f40d67ada50133a6834405cdf84d48add854692b2fe4809596a443bba6dff648eb1917cbbbd986e1353da0b5a3f7c5fa1856280cac3b65f794107fc0e
- SSDEEP 24576:/jjjr9jjjrrTiw2BBAQtAhlE8Bx4tSVuUXG4fM+hGGc/ev6kM/ev6XAhY0slZOZ:xiw2nAQtAfoO7U+hhc/ev6kM/ev6Xp
- TLSH T11FB5280666AC6CF5D0724530467282999775BC1187238ECF22907EEDBFB66D2BD38B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_2d7bcf212db1b0b553b03ce754762d7d_amadey_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar_wannacry.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_2d7bcf212db1b0b553b03ce754762d7d_amadey_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar_wannacry.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_2d7bcf212db1b0b553b03ce754762d7d_amadey_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar_wannacry
- Size 2.3MB
- SHA256 f78396690be7eed92861a57959e76491c62b3e0c346df4c628bb0ec116167028
- MD5 2d7bcf212db1b0b553b03ce754762d7d
- SHA1 b2730539e411edf95e20b2cc1fe4e6cf4462f1e2
- SHA512 6c91ec1f40d67ada50133a6834405cdf84d48add854692b2fe4809596a443bba6dff648eb1917cbbbd986e1353da0b5a3f7c5fa1856280cac3b65f794107fc0e
- SSDEEP 24576:/jjjr9jjjrrTiw2BBAQtAhlE8Bx4tSVuUXG4fM+hGGc/ev6kM/ev6XAhY0slZOZ:xiw2nAQtAfoO7U+hhc/ev6kM/ev6Xp
- TLSH T11FB5280666AC6CF5D0724530467282999775BC1187238ECF22907EEDBFB66D2BD38B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.